phntom[.]wixstudio[.]com

Phntom.wixstudio.com has been identified as a domain actively impersonating the Phantom brand to deceive users, currently under investigation with an active status. This domain poses a significant risk as it leverages brand recognition to potentially harvest sensitive credentials or distribute malicious payloads.

This domain was flagged by 3 of 95 VirusTotal vendors, operates under Let's Encrypt for SSL certificates, and resolves to IP 34.144.206.118. It has been blocked by MetaMask and SEAL, and appears on 2 security blocklists. The domain's infrastructure includes a trust score that warrants further scrutiny due to its active impersonation tactics.

As this threat remains active, users are strongly advised to avoid interacting with phntom.wixstudio.com and report any encounters to their security teams. Organizations should monitor network traffic for connections to the associated IP and consider blocking the domain at the network perimeter. Additionally, users should verify the authenticity of Phantom-related communications through official channels to mitigate the risk of credential theft or phishing attacks.